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^o\] = f-A] ^ lHJ£r, ^7} #5^-01 E S -^-E^ ofiX) 

*1# A>-g-^> ^i^^hiaI ^|wi-n|-^Ei AiaelMl- ^#*>^ #31 ^^7]- #2}o] 
^eoIItII Qt* ^ x^s^l ServerHello ^^Rr #?fls}-, ^ 

7\ A]^SlM# #7H<4, A^7> 71 ^<^Rr #31^, *\*\A A S 

7l 1;^-A^^-Ei 0.5. <£Jl, sfl^- ^Jie^^ MAC ^JIEl^H Af-g-^ ?1 

#^§- ^i^7> cf^- ^Ai^-^-Ei^ <a-ss}-^^ iL^i smsKt ^ri# «a- 

Bl7l ^tb ^1 1 ^*Rr *\*\7\ #e^o]o]E7}- A^sq- u^eI 

AlHSm-I- ^OT^ ?A^r Sf-O]^ ^ ol^ ^JL °1M*1» ^*Rr ^1^, A S 

^^.S. Aja-^S , 71 -i-lj-, <#Jr<2}- 7151- nfl 71 ^ 7^^ ^Tfl 

2h ^7> Jilfl^r ^1^1^71- ^S^H S}-^^^ ^741^, #^ol<aS7> iL 

^ *\3, ^l^T 71 &<LsL 3J°leHr ^ *ll 2 eflS 

5. 4 
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-Tf-t! ^r-§- ^J- 1 ^ {Method for operating communication protocol} 

[51^21 ^1 

£ l£- ^2fl^ WAP ^Sjs] t^JE. 

£ 2^ ^2fl^ WTLS = 3.S.#4M $IM 3 (Handshake) ISIfs] ^ ^\Mr 

£ 3£r 4^- WAP i^S] t^S. 

£ 4^ ^IMI SSLS a. (Handshake) ^r* iL^ £^ 

ioi... tilM^a. A% 102... A%- 

103... J±<?> 31 104... A%- 

105... 4& 31^ 106... w]^ Afl>a ^1^ 
107... -g-g- Tllf 1 

<io> -g. ^-^^ -^X) = 3.S.#«*fl ^tt 3J°-3*1, ^-§1 ^^fl WAP S.^ ^MH -§--§- = 3. 

Zl^ 7fl#oll^ A>-g-^># o]^> 7 H] -^A] Illf ^ 53 
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<n> WAPCWireless Application Protocol)^: ^ ■^^iMS.^Bl 

tfltb M fiff ^ll^*V7l ^-Sfl <*flSj£, SS^ie]-, 2r.7W<2}- -f- 47^ 

3^r7 r ^^ol 5)] 97^ 6 ^^1 ^3 -fr^ c]*l*§ ol^Al « 0 VAiol GSM* 7]a>o. 

<12> o]^- ^ WAP S.^ A <HH *I^l^r °1 el] tfl^j. l£o]v£ £ lol] J£A|5l £ 

°1 ^(transport) 31 12) <?] WDP(Wireless Datagram Protocol )(22)^ w>5. ?!llr 

<?] WTLSCWireless Transport Layer Security) (23) oJM 1 ?]: ol^M^^r. 
<i3> WTLS H^£#-8r SSLCSecured Sockets Layer)5l-ZL ^ ^ ^<£j?)l X^<?] 

TLSCTransport Layer Security) ^S£#* «>%^.S «r ElSfS^i, #tfl 3 

7J *1<3 ^?>* 7>^1 ^tfl^ 7>^1 vflE^ofl oj-^i ^aj^oj ol<S). 

WTLS(23)^r 4-§-^r ^ 71^* afl^SKa %>cf . 
<w> WTLS(23)^ ^^71^ -g-g- A}o]d\) t\]°]t\7} w>^)7i 

<is> WTLS (23)^ #^71 <4 -g-g- S^zz.^ ^r°l°fl^i ^i^^^ HH^} ^?_HH 

^ ^ *r-8-*W 7>S^ C J# ^3 2*5. zz. ifl-g-o] 

<16> ^fl, WTLS(23)^ l&lM^ -g-g-^S-ZL^^ ^ A>olo]]A^ A>-g-^Hl tfl & 7l 

17-5 



1019990066105 2000/9/1 

<17> 2. 2^ f^efl^ WTLS ^E— 4fl °1 3 (Handshake) ^ ^^># 

W£ t^olcf. £ 21- %^s>^, ^ (client)^ a^ (Server)# 

(Hello) ^1*1 # SSHH <£3L?]^«\} ^s>ji JE^-tbcf. ojo^, 3.^-0]^^ 

^ *\v]7} A]^e)E( pre - m aster secret )°fl th9*M ^Sfl ^-2.tb ^51^ 

(certificate)^ ^«]-^ ^ til- iH^rW. n&l^, <^1«1 ^f^i Ala.^ <2f <y 
^Kal,bl %S,). 

<is> trfeH, #5}o]o]e^ Ai^7V *]S. <^1;* ^l^sfl tfl&mr € 

=. 4-)H^L7} %<Q*}2\ 7fl^^ol o| ^J-g- ^t4(cl, dl 

<19> <g7.fl ^^7l^] uflS.^ -g-^u|- ^o o >^e)^ 1(CPU )^ = 3.^ s}.o^ WTLS7 |. cfs. 

-2 ^^(certificate)!- 91^<=>M ^7fl 7l ^ ^ ^- 7 fl 

<20> ^*fl WAP M ^H]A^ WTLStt 71^.^ AS. 7fl# W>5. z\]o]B] 

SE^-, ^fl WAP If A cMH^ -g-g- SSZL^ ^#0^0} Z\) 0} Jf ^ 

(integrity), HH^I $-91, 91^] tfl^b 7l^ol &$h=r. *r 

17-6 



1019990066105 2000/9/1 

4 ^£^1 pki (Public Key Infrastructure)* ^-%-*}7}7\ <£$°]t\- 
<2i> a. -S-7l<q- -g-*)!^* 3J°-3>1, ^fl WAP I§ #<HH 

<23> #e^olo]Ea}- ^ti^ *)l^£)ir #^1 =££f £-g-4H , #7l ^7} ^7] #ej-o] 

<24> ^-71 ^-i^7> (server random) ^f>\3L, n ^7} #e}o]olHofl 

Tfl ^tr te-fCServo Hello) ^7^]^-; 

<25> ^-71 a^ 7 > ^#tr «4I«1-«>^b1 Al^slEsq. ^eH^S (client random ), >H 

«1 (server random) «f^S ^]3.^\E.^r *$ A ^}^ ^}^; 

<26> tf 7 ] A^7> ^>iEi A]£lii]E<4 #&|-olol E ^ ig ( ^ W>^-O.S 

?1 Ir^Ckey block)* ^*rfe ^^1^; 
<27> ^-71 A^ 7r #7] 71 1;^-^.S^-E-| 3^3.2.5. ^(encryption), Sfls. 

(decryption) <gJL^3\- MAC(Message Authentication Code) ^Jiel^^l *\ ^>-g-^- 7} & 
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1 ChangeCipherSpec 31^1= -I- 43 ^*H^ ^^1^; 

<29> Aj- 7 1 ^tt]7> #e}-o]olE 7 |- A^S-J- -f-^ n}A^ A] 3 elS t ^^^cf^ ^J-g- 

t 5^ #S(Finished) °fl *1 *1 1- cj^sq-; 

<31> #7] #5^-olc>jE7}- 7,>A]ol 7Hi 9X^ #7] ^ X\3.Z\^9\- ^SH^E 

#71 A^S«-Ei A^ ig^ ^AS-^-El A^Sl- »o V ^l°-S. *]EL 

5lJ=, 71 ^1=-, #JL<4 7121- ^ 71 T^^fe ^^121-; 

<32> #7l 91^-7} #7] 2fl.SJ=§- ^Bjtb ^ V 7l A} ^ 7> Jilflfe- *IM*l7> ^JlSf- 

<33> #7l #2l-ol<£;EollA-l ^ ^Alxll- £*HI>H # 7 1 X\ V] 9\ u\ + E-] A] 3 2^ 

# 3* St-*I*Kn, #71 #el-oioiE7> iLiflif- *IM*l7> a^ ^cq^v 71 

^e)3r>ol ^o]^ <£sl^ 2 ChangeCipherSpec ell^^l- #^Rr #711 

<34> ol<4 ^ wV^o|l S^ig, ^T-fl WAP 3L§°1M ^lAl^l ^ -g-g- E.S,H^ ?fl 

f^S] Al~g-*H ^7}^ ^l^A-m- ^ 7 fl 71 

£>^V ^g-B- 711- 7laVA^ 711- ^ M&*}Tr . IL 

WAP #<*H ^>qe}- C^olEl 7l^# *l^<5Rr -g-g- SSZL^ 711 

<35> o)t} ^ ^2:5>^A^ Ig^^ ^Al c^lfl. #^1 ^^^-Cf. 
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<36> ^-^oj]A^ ^sKr WAP ^ -§-§- ^3-3-^ 31 #3 £S£t^ 

-^7fl f)9\- <£^-g- Cf^l <^ ^^7> ^-fi-*Kr H]^ 711- 7ltiV°S o] 

^■oJ*H £ 32f ^o) /fl^ (Session) 31^ -g~g- ^n^ollTll *1^ 

*fl4i (Secure Session) ^e^H^ *H^>7l nfl-g-ofl SSLS(Secured 
Session Layer Security) 2} ^^^t}-. 
<37> £ 3^- ^ ^^^1 ttr€- WAP SUf i^jsj ^-S£o]cf. £ 3# , £ 1^1 

^ ^SSRr T^s^j ^ 7^(105) ^ 31^ W}^ /il^ 7)]#(106)°] 

<38> £ 4^ ^<H1 ^ SSLS 4)1 iL<& ^o]v\ , 

5. 41- t^, SSLS ^flS-g: al^ -E^o} e a}- *]n\7} *1 

^>JL $1^ ^ al^a 71 H}o^ o]^^^ o] ^o. ^ ^o. ojlul-^ 

&| Ala.e|M5. -*}-§- W". 
<39> *V^, SSLS ^Bje. 4=11 °1 3 ^s>^ t^i). ^cf. 

<40> ^ ^A] ofloflA-^ <a-g-*Rr HHfclTr WTLS ati^i *}-§-€rKr 5. 

7)# <a<H# ^>-§-^>^^, PRF(Pseudo Random Function) <^1 WTLS 
-g-?>Rr nrfli A>-g-^cf. 

<4i> tefolojEH ClientHello ^H*l# ^^Hl ClientHello^ #e}-°l 

& ^ ^l~§-*r ^i^^Vl- zfz}- i^cf. ClientHello *)H*l<i) f^f WTLS & 
*}-8-«l-fe 7l^ <£°]£- 5.^-5}^ 

<42> struct { 
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<43> uint32 gmt_unix_t ime; 

<44> opaque random_bytes[12] ; 

<45> } Random; 

<46> opaque Identifier^. .2 A 8-1>; 

<47> struct { 

<48> uint8 cl ient_version; 

<49> Random random; 

<50> Identifier client_id; 

<si> } ClientHello; 

<52> o]o] > ClientHello ^ a] *1 1- «>J1^ >M"§-*r ^1^^>7> -B-JL^l ^}^r 3s 
^^MH «5fl«l-P>>;El Al3.elEs. ^ 

4. ^H, ^ ^fl^ &-g- ^j^*H ServerHello 

ServerHello 4^-^ ^^f. 

<53> StrucH 

<54> uint8 server_version; 

<55> Random random; 

<56> } ServerHello; 

<5?> o]o] t d\)n]-v}+B\ X\el€\e.2\- #eJ-°]<?iH ^ , ^SJt-i- 
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*\»\ ^ ?1 ^-Hj-gr ^^tb^-. **^*\, °1 ?1 l-^JliM^ 

3-2.3. #Jl, 3fl=- ^Jiel#^ MAC iJoiemolH 7) (key) ^th=h 

<58> olnfl, p]-^ Al^ElH^- Tfl^Rr 

<59> master_secret=PRF(pre_master_secret , 'master secret', 

<eo> CI ientHello. random + ServerHello. random) [0..19]; 

<62> key block=PRF(master_secret , 

<63> expans i on_ 1 abe 1 , 

<64> Security Parameters. server_random + 

<65> Security Parameters .cl ient_random) ; 

<66> cz\ 7 }*] ? 71 3^ 71 ^iliM^ ^cfljg. 16 byte 

client MAC key, 16 byte client encryption key, 8byte client IV, 16byte server MAC 
key, 16byte server encryption key, 8byte server IV-1- ih^r^- iHI-i: °l-8-*h=h 

<67> o}o\ > t\%- DflAl^-a-E^ ti^«fl^ 3°l5Hr °^7] $\ 

ChangeCipherSpec ?l|2£t ^^tb^. 

<68> Olol, Al^ejE^- 1.11^3. <#d\]*\ $>J7A-j.£ #£}o] 

A^S!]- Al^^Efl- ^Aj^t}.^ o. ^.o]^. ^ ol- ^ ^Al^ 

» ^^th^T. °1 *IM*lfe- sfl-SH. 7ll#(record layerHH ^ 

3L9\ ?] V A ?] (MAC key)&£-3. ^sls]^ ^ll ^H^H^-. # 

17-11 
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<69> struct{ 

<7 o> opaque veri fy_data[12] ; 

<7i> } Finished; 

<72> <^7}*\, 7}&i tflo]El(verify_data)^ 3*^. 

<73> PRF(master_secret , 'server finished', H(handshake_messages))[0. .11] ; 

<74> <^7H, €^ 4fl°la. D)l^]^l(handshake_messages)^ ClientHello^ Server Hello^l 

^irSKconcatenation)^ ^J 0 !^. 
<75> ojo^ ^^7> ^^t!r ServerHello ^>M*1* itr*}^- 4flo]a. efl^E., 

ChangeCipherSpec ell3£, ^.g. *1M*1S S^}^ €^ 4IM3. efl^^.^ MIS ^3. 

<76> olo] ; #e}o]o]E^ ServerHello ^1 *1 *1 1: ^e^l-ZL i-M XHOo] 7}*1ji 

oflHl-n>^Bl *}EL^\1e_2\- #e}o]olE ^Jo] , ^tt] ^ S^S^^ *| <2}- ^Gj^r wJ-^O. 

<77> 0)0], #5}o]o]e^ ChangeCipherSpec efls^-l- ^ej^ A)^7 r JiMl^ 

<78> , ^SM^E^ ^ cflAl^l- %A\f$\*\ *)*)<% V}^B] AlELSm-I- 49 

ChangeCipherSpec ^l^tr*}. 
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<79> o^, ^x= $)o}=L s\.^o] s§^-*\o_3_ &5LS\9X<L^, -g-g- SSZL^ 

<80> o^o] ^ofl^a}- ^-ol ^ofl tt}--^ £-g- ^£r, ^ 7 fl WAP 3. 

3. ?1# ^ JH^Rr ^-^-S. ^ll^tVcf. 4^ ; ^fl ^-^71^ Hl-S. 

3 it°14 ^el^l^ ^^^.SH 3-g-«" ^ ^<*fM ^ ?1# Af-g- 

^ ^Efls. A>-g-^Hl cfltt ^rS. 9X^. WAP ^ 
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#e^o]olE ( c iient)^ (Server)^: ^1^5]^ ^ SSSf -Sr-JMH , 
<#7] *\*]7} <#7] o}e s. "fl^l-I- ^JL ^1*} (idHl 

^w]-P>i&| Ala.e)^.(pre-master secret)!- ^#*>^- 

^•7] a^ 7 > #7l ^eHSiM^Ml ^(server random) $|3H 

ServoHello i£7fl<4; 

<#7] *\*\7\ 3#tr <^lH]-4i^ Al^E^ESi)- #b}o1<>1;e ^(client random), ^ 
*H ^ (server random) w>%o_^ X\3.z\m^ ^S}^ #7fl<4; 

^■7} *]V]7} sg^Q Al3.5lS^ #Sfo]<yE ^ ; ^ ^ ^ig &-g- W>%0_^ 

7} l-^-(key block) # ^*f^r 

#7l ^£ 71 ^#^0.^ ^(encryption), tfl^- 

(decryption) ^JieJ^jif MAC(Message Authentication Code) «&jL5J^H & 

1 ChangeCipherSpec 5ll3Ht ^*r^ 

Aj-71 A^ 7 > #71 #5^-o] OIE 7 ]. A^<4 ^^tt ^^l=Hr 3 

* SKI* *r 911= ^(Finished) ^M-i- ^*Rr ^TflsJ-; 

#7l #£}-o]Ol E 7 } ^>A]ol 7f^Jl #7] ^B]-P>^Bl A]3.^ E2f ^S^O} E 
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2 ChangeCipherSpec = » ^1 
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